Performing CyberOps Using Cisco Security Technologies (CBRCOR) — Question 15

An engineer returned to work and realized that payments that were received over the weekend were sent to the wrong recipient. The engineer discovered that the
SaaS tool that processes these payments was down over the weekend. Which step should the engineer take first?

Answer options

• A. Utilize the SaaS tool team to gather more information on the potential breach
• B. Contact the incident response team to inform them of a potential breach
• C. Organize a meeting to discuss the services that may be affected
• D. Request that the purchasing department creates and sends the payments manually

Correct answer: A

Explanation

The correct first step is to engage the SaaS tool team to gather more information on the potential breach. This action helps identify the root cause of the issue before escalating it to the incident response team. The other options either involve notifying teams without understanding the situation or taking actions that may be premature without first gathering detailed information.